Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139332e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3139332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: G9fq7IyxbwK9HlqUieCxw8zaXnOkNjjP7oxJ9reDnzc=
Subject key identifier: 70:38:1D:10:AE:45:68:51:A2:A1:FC:DA:9B:97:70:87:F3:42:AB:51
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 38CBB20E3CDC420FBD82A75B8C9EA4B9BD3E64E3
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:29:04 +0000
ROA not before: Thu 02 Nov 2023 11:24:04 +0000
ROA not after: Thu 31 Oct 2024 11:29:04 +0000
asID: 5650
IP address blocks: 47.189.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cb:b2:0e:3c:dc:42:0f:bd:82:a7:5b:8c:9e:a4:b9:bd:3e:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:24:04 2023 GMT
Not After : Oct 31 11:29:04 2024 GMT
Subject: CN=70381D10AE456851A2A1FCDA9B977087F342AB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:03:a6:66:80:5b:e6:84:ef:49:fe:86:5b:
20:fd:1a:ea:8f:be:9d:53:b2:9c:40:a8:6f:56:d4:
46:3a:60:08:3a:2d:f2:c1:74:0b:32:7e:d8:9e:2d:
43:23:1b:40:ac:b2:b5:4c:36:97:51:a3:2e:46:73:
5e:eb:85:f9:ee:3d:a4:28:78:73:51:90:df:45:d1:
c7:57:19:23:9e:d5:13:66:35:54:32:ee:63:40:47:
fd:12:4d:70:7c:26:4f:57:35:92:81:ec:1d:e5:59:
ce:24:48:d1:4b:51:fc:74:93:e3:8c:84:97:96:e8:
71:3e:e2:f0:0c:d5:ad:5f:d3:7c:a2:dc:b3:88:8e:
e5:24:18:97:f6:4b:27:5e:3a:40:d7:da:70:2c:34:
fb:df:a7:30:31:dd:f0:c2:9c:c9:22:46:05:23:a3:
d4:18:23:e8:39:b1:9e:34:94:b3:93:69:b9:fc:36:
c9:3b:e1:d2:d3:57:da:61:5c:03:ab:35:4a:81:fc:
88:6f:af:07:d5:5f:8e:dd:e8:df:29:41:27:ce:e5:
be:38:d1:e8:96:b1:c8:14:be:dd:5d:51:c6:b0:87:
d6:f6:64:a1:8d:f1:22:e6:ac:e9:6f:99:a9:fe:fc:
78:7d:65:96:7f:2b:53:be:b0:d4:b2:2f:66:c4:2e:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:38:1D:10:AE:45:68:51:A2:A1:FC:DA:9B:97:70:87:F3:42:AB:51
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6b:fc:d7:6b:7a:3a:93:b4:8a:03:49:e1:92:4e:6b:97:ea:
4d:20:3e:f7:56:e1:1a:bf:a1:c1:bf:44:d0:44:c8:3d:5e:ae:
04:80:55:56:d3:14:b0:be:df:7d:54:3e:02:51:42:22:e6:29:
65:dd:0a:e3:22:28:a9:71:dc:d9:9c:fb:5b:28:a3:05:ed:71:
4b:4a:df:11:3d:d6:fc:1b:df:40:2a:0c:bd:c7:bb:a9:36:d2:
cd:e6:e7:50:ee:a8:5b:d3:35:2d:56:6d:89:5f:fb:18:c7:9e:
1c:fd:43:9f:c7:cb:b6:01:64:9d:bd:0e:96:b8:fd:9e:ad:71:
c1:64:33:0e:e0:12:0f:98:94:67:9f:ae:ef:d0:b4:02:c7:71:
d9:29:cb:85:9b:78:b9:d6:af:29:df:5f:c9:95:96:d8:f1:e2:
f3:ae:ae:f0:1c:4e:41:69:d3:cb:99:9e:eb:58:e2:88:5c:71:
cd:fb:9a:d9:ee:7a:2d:01:df:e1:c9:8f:e0:c0:ab:8b:69:0b:
6e:7a:ba:b4:88:0d:9a:84:7f:68:9a:33:91:6b:76:ad:27:64:
66:c8:b3:4b:b7:51:43:c4:ca:d8:3e:39:a2:7d:8e:6c:5a:14:
2a:d7:d0:e4:73:9f:ad:a3:8d:73:ce:c3:e9:e5:95:80:aa:83:
9f:58:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org